It's not possible to enforce this yet, but we hope to add this at some point (probably in 2013). Unfortunately TFS doesn't enforce this at the server side, which means that clients can ignore any policy!

You could in theory use SQL Connect instead if you really need to enforce this, and don't mind working in Visual Studio.